CVE-2006-4144

Severity

26%

Complexity

49%

Confidentiality

48%

This vulnerability is addressed in the following product release: ImageMagick, ImageMagick, 6.2.9

Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.

This vulnerability is addressed in the following product release: ImageMagick, ImageMagick, 6.2.9

CVSS 2.0 Base Score 2.6. CVSS Attack Vector: network. CVSS Attack Complexity: high. CVSS Vector: (AV:N/AC:H/Au:N/C:N/I:N/A:P).

Overview

Type

ImageMagick

First reported 18 years ago

2006-08-15 23:04:00

Last updated 6 years ago

2018-10-17 21:33:00

Affected Software

ImageMagick 6.0.1

6.0.1

ImageMagick 6.0.2

6.0.2

ImageMagick 6.0.2.5

6.0.2.5

ImageMagick 6.0.3

6.0.3

ImageMagick 6.0.4

6.0.4

ImageMagick 6.0.5

6.0.5

ImageMagick 6.0.6

6.0.6

ImageMagick 6.0.7

6.0.7

ImageMagick 6.0.8

6.0.8

ImageMagick 6.1

6.1

ImageMagick 6.1.1.6

6.1.1.6

ImageMagick 6.1.2

6.1.2

ImageMagick 6.1.3

6.1.3

ImageMagick 6.1.4

6.1.4

ImageMagick 6.1.5

6.1.5

ImageMagick 6.1.6

6.1.6

ImageMagick 6.1.7

6.1.7

ImageMagick 6.1.8

6.1.8

ImageMagick 6.2

6.2

ImageMagick 6.2.0.4

6.2.0.4

ImageMagick 6.2.0.7

6.2.0.7

ImageMagick 6.2.1

6.2.1

ImageMagick 6.2.2

6.2.2

ImageMagick 6.2.4

6.2.4

ImageMagick 6.2.4.5

6.2.4.5

ImageMagick 6.2.5

6.2.5

ImageMagick 6.2.6

6.2.6

ImageMagick 6.2.7

6.2.7

ImageMagick 6.2.8

6.2.8

References

20060901-01-P

21462

Patch, Vendor Advisory

21525

21621

21671

21679

21832

22036

22096

22998

GLSA-200609-14

1385

1016699

DSA-1213

MDKSA-2006:155

SUSE-SA:2006:050

http://www.overflow.pl/adv/imsgiheap.txt

RHSA-2006:0633

20060814 [Overflow.pl] ImageMagick ReadSGIImage() Heap Overflow

20060816 Re: [Overflow.pl] ImageMagick ReadSGIImage() Heap Overflow

19507

USN-337-1

imagemagick-readsgiimage-bo(28372)

https://issues.rpath.com/browse/RPL-605

oval:org.mitre.oval:def:11129

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.